CVE-2026-64348

The CVE-2026-64348 issue in the Linux kernel affects EHCI/FOTG210 isochronous submits, where a staged usb_schedule (ehci_iso_sched) attached to urb->hcpriv could leak if usb_hcd_link_urb_to_ep() fails or the controller becomes inaccessible. The published fixes free the staged schedule from don...

EUVD-2026-48892

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

CVE-2026-64348 usb: free iso schedules on failed submit

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

CVE-2026-64348 usb: free iso schedules on failed submit

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

Astra Linux – Vulnerability in Qemu

A reentrancy issue related to DMA was discovered in the USB EHCI controller emulation of QEMU. EHCI does not verify whether the Buffer Pointer overlaps with its MMIO region when transferring USB packets. Crafted content may be written to the controller’s registers, potentially triggering...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: usb: host: Fixed the refcount leak in ehcihcdppcofprobe. offindcompatiblenode returns a node pointer with a refcount incremented; we should use ofnodeput on it after processing. Add the missing ofnodeput call to avoid the refcoun...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011115)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011115 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001078 advisory. Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993015)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993015 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer wit...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992253)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992253 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer wit...

CVE-2023-53986

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: 3.881739 usb 1-1: new high-speed USB device number 2 using ehci-platform 3.895011 Reserved instructio...

CVE-2023-53986

CVE-2023-53986 concerns a Linux kernel issue for mips BMIPS BCM6358 where RAC (Read-Ahead Cache) flush is disabled for TP1. The bug caused kernel panics on BCM6358 when EHCI/OHCI USB drivers boot from TP1 due to RAC not being initialized properly, leading to a fatal exception and reboot. The vuln...

EUVD-2016-10698

Malware in sbrugna...

EUVD-2016-3282

Malware in sbrugna...

EUVD-2021-27025

Malware in sbrugna...

EUVD-2017-18309

Malware in sbrugna...

EUVD-2022-55418

Malicious code in bioql PyPI...

SUSE CVE-2022-50153

In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

DEBIAN-CVE-2022-50153

In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50153

In the Linux kernel, the following vulnerability has been resolved: usb: host: Fix refcount leak in ehcihcdppcofprobe offindcompatiblenode returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...